Install CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch) in Gemini CLI

What you need first

• Gemini CLI, installed.
• Nothing else: the server runs on its publisher's machines and Gemini CLI connects to it.

Steps

1. Open ~/.gemini/settings.json, or create it. For one project only, use .gemini/settings.json in that project.
2. Add this block. If the file already has mcpServers, add only the entry inside it.

{
  "mcpServers": {
    "data-cve-security-advisory-vulnerability-database": {
      "httpUrl": "https://a2awire.com/mcp/data/cvewatch-cve-security-advisories-nvd-high-critical-9a16b6/http"
    }
  }
}

3. Save the file and restart Gemini CLI.

Check it worked

Ask Gemini CLI: List the tools of data-cve-security-advisory-vulnerability-database.

If it does not start

401 Unauthorized

The endpoint wants a sign-in or a key. Sign in when Gemini CLI asks.

Nothing changes after a restart

The file is not valid JSON any more. Look for a missing comma where the block was added.